CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.

Credits

SEC Consult Vulnerability Lab identified and reported the vulnerability to Miele PSIRT.

References